CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

CVE-2025-29659

creationtimestamp| type| source ---|---|--- 2025-04-21 15:03:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12683 2025-04-21 16:04:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114376800501667579 2025-04-21 16:13:56+00:00| seen|...

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

CVE-2025-29659

The Yi IOT XY-3820 wireless security camera, specifically version 6.0.24.10 , is vulnerable to Remote Command Execution (RCE) . The root cause is located in the cmd_listen function within the cmd binary, which allows for the unauthorized execution of commands. This vulnerability could potentially...